Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: 8fPI1yYu0I9R9izEcJTPpSbqU9SupNDkyrGuWi8ksgU=
Subject key identifier: 5B:0C:0A:88:7B:B9:CC:18:3A:C0:96:FD:22:06:88:A3:04:03:EB:A5
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 019CAD5A0D9D8F3429D274B223DB4A22EA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 0833
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: Imz8YrkgAfGtXDAuYp6Vx13GLSRQ+lmp4bGaVGaOITc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0d:9d:8f:34:29:d2:74:b2:23:db:4a:22:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=5b0c0a887bb9cc183ac096fd220688a30403eba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:a7:55:22:6d:f2:fa:b8:27:51:66:8b:c6:
37:4e:33:22:94:70:b9:32:9b:6b:18:af:77:fa:33:
fe:84:c4:e8:fe:5c:cd:a0:2a:a6:0c:05:88:c1:79:
b1:f8:12:3f:45:da:c9:98:cc:69:ea:9f:62:1b:24:
02:ab:06:8e:26:92:b6:b8:f6:d3:ba:44:46:2c:ac:
9d:09:e6:81:22:7f:da:ac:f0:d8:c8:e1:d9:f7:8d:
1a:01:a4:d6:3a:30:a4:ff:7b:48:44:02:06:f5:ec:
95:44:b7:84:5b:2b:58:7e:8f:03:83:d7:a3:ad:8b:
94:56:f2:18:34:47:91:4a:d8:23:27:5d:49:9d:8c:
d0:41:94:b7:9f:f5:3d:f6:47:03:d2:fc:d5:4f:63:
c8:e7:39:c4:ea:57:a5:7a:b5:33:97:df:73:00:ab:
10:44:04:47:7c:ad:e8:1d:c9:f2:7e:8d:5c:6d:63:
bd:44:97:00:a6:86:bd:d5:28:cb:a9:23:0e:c5:d0:
fd:cf:06:a7:87:3b:90:1f:f2:59:49:2d:78:e1:86:
bb:00:86:fa:95:b7:97:e6:ee:bf:5d:c5:73:f5:63:
fe:2e:9e:b4:39:bb:19:13:96:48:f4:9c:17:8f:c4:
75:a5:d7:b2:e7:7c:16:45:93:d8:f9:49:cb:39:45:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:0A:88:7B:B9:CC:18:3A:C0:96:FD:22:06:88:A3:04:03:EB:A5
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5b:32:2f:2b:c2:bb:3c:35:b7:63:21:4f:02:e0:f3:88:1d:
83:cf:34:57:7a:d5:ec:ae:be:59:37:0c:47:6d:bb:ee:ed:9b:
5a:07:25:af:50:90:bf:c2:ce:9e:61:a7:54:17:0d:3a:1d:02:
e4:d9:ca:10:1d:af:d4:34:44:fc:1b:f0:ef:9e:6c:ad:a6:cf:
ae:20:2b:83:07:7e:cd:ee:a1:63:4b:4f:95:ef:76:4a:d8:c4:
98:68:ae:41:fa:cb:27:a1:8d:e6:e6:ad:aa:69:a4:b7:8c:44:
a0:d3:30:a8:33:f9:fc:ca:a7:ed:af:79:6d:7e:58:7d:ea:1e:
50:ad:57:fb:a3:a7:83:02:b6:65:a4:6e:d1:99:87:1f:0c:28:
61:38:33:07:a3:f4:e3:8d:87:87:2d:11:a2:43:03:3b:22:ae:
d8:57:16:a7:f0:01:01:f8:fe:03:ef:5d:ca:b2:c3:79:dc:11:
7f:4b:78:6c:0d:6f:21:a0:92:68:85:29:49:48:03:2e:34:89:
fd:22:e5:f2:34:b0:2d:54:51:81:b6:1f:5e:ae:48:b7:cb:78:
3c:5f:da:ee:a0:9a:63:46:d6:cf:76:77:c6:d4:82:43:68:78:
5a:bc:a8:ec:bb:f7:69:91:20:a4:cb:5d:c2:a4:ff:ca:de:39:
08:37:74:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWg2djzQp0nSyI9tKIupHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOGUxYWM3OGU3NmI2ODdkZDU2MDVmMmZiODFmZGQ1YWFm
ZWI3NDEwHhcNMjYwMzAyMDcwMTI1WhcNMjYwMzAzMDcwMTI1WjAzMTEwLwYDVQQD
Eyg1YjBjMGE4ODdiYjljYzE4M2FjMDk2ZmQyMjA2ODhhMzA0MDNlYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9+nVSJt8vq4J1Fmi8Y3TjMilHC5
MptrGK93+jP+hMTo/lzNoCqmDAWIwXmx+BI/RdrJmMxp6p9iGyQCqwaOJpK2uPbT
ukRGLKydCeaBIn/arPDYyOHZ940aAaTWOjCk/3tIRAIG9eyVRLeEWytYfo8Dg9ej
rYuUVvIYNEeRStgjJ11JnYzQQZS3n/U99kcD0vzVT2PI5znE6lelerUzl99zAKsQ
RARHfK3oHcnyfo1cbWO9RJcApoa91SjLqSMOxdD9zwanhzuQH/JZSS144Ya7AIb6
lbeX5u6/XcVz9WP+Lp60ObsZE5ZI9JwXj8R1pdey53wWRZPY+UnLOUW9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsMCoh7ucwYOsCW/SIGiKMEA+ulMB8GA1UdIwQY
MBaAFIKOGseOdraH3VYF8vuB/dWq/rdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYt
ZDA2ZTdjNjkyZDhiLzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNzFkYzEtM2NhOS00NTdmLWI4NmYtZDA2ZTdjNjkyZDhi
LzEvZ280YXg0NTJ0b2ZkVmdYeS00SDkxYXItdDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFsyLyvC
uzw1t2MhTwLg84gdg880V3rV7K6+WTcMR2277u2bWgclr1CQv8LOnmGnVBcNOh0C
5NnKEB2v1DRE/Bvw755srabPriArgwd+ze6hY0tPle92StjEmGiuQfrLJ6GN5uat
qmmkt4xEoNMwqDP5/Mqn7a95bX5YfeoeUK1X+6OngwK2ZaRu0ZmHHwwoYTgzB6P0
442Hhy0RokMDOyKu2FcWp/ABAfj+A+9dyrLDedwRf0t4bA1vIaCSaIUpSUgDLjSJ
/SLl8jSwLVRRgbYfXq5It8t4PF/a7qCaY0bWz3Z3xtSCQ2h4Wryo7Lv3aZEgpMtd
wqT/yt45CDd0qA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:49 2026 by rpki-client